The BlackListPlugin when reporting that a mouse is in the trap shows an empty opps page.

But why does it have its own?? Why not use the generic template?

It also assumes that TWiki Variables are expanded when passed via URL. This is no longer the case. I believe we started encoding special dangerous characters as a result of one of the many security reports agaist our oops templates which have been hopelessly open to XSS.

But it is not at all needed to transfer this via the URL. In fact the plugin does not need to say very much detail.